[
https://issues.apache.org/jira/browse/RANGER-1648?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16630079#comment-16630079
]
Mehul Parikh commented on RANGER-1648:
--------------------------------------
Committed to
[ranger-0.7|https://github.com/apache/ranger/commit/1c68d4fe889520f17546eb0e925e06b85843b23c]
> Ranger Kafka Plugin now should use the Short name from Kafka Session Object
> ---------------------------------------------------------------------------
>
> Key: RANGER-1648
> URL: https://issues.apache.org/jira/browse/RANGER-1648
> Project: Ranger
> Issue Type: Bug
> Components: plugins, Ranger
> Affects Versions: 1.0.0, master
> Reporter: Ramesh Mani
> Assignee: Ramesh Mani
> Priority: Major
> Fix For: 1.0.0
>
>
> Ranger Kafka Plugin now should use the Short name from Kafka Session Object.
> Based on the change on https://issues.apache.org/jira/browse/AMBARI-21238,
> kafka will have the necessary rules for getting the short name and passing it
> in the Session object of Kafka Authorization. We don't need to specifically
> convert it to get the shortname.
> In non ambari install following file will have the rules like
> sasl.kerberos.principal.to.local.rules=RULE:[1:$1@$0]([email protected])s/.*/ambari-qa/,RULE:[1:$1@$0]([email protected])s/.*/hdfs/,RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*//,RULE:[2:$1@$0]([email protected])s/.*/hdfs/,RULE:[2:$1@$0]([email protected])s/.*/hdfs/,DEFAULT
> in file /etc/kafka/conf/server.properties for the correct user information to
> be passed.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
